183 lines
4.8 KiB
Go
183 lines
4.8 KiB
Go
package server
|
|
|
|
import (
|
|
"context"
|
|
"time"
|
|
|
|
"github.com/hashicorp/nodeenrollment/types"
|
|
)
|
|
|
|
// getOpts - iterate the inbound Options and return a struct
|
|
func getOpts(opt ...Option) options {
|
|
opts := getDefaultOptions()
|
|
for _, o := range opt {
|
|
o(&opts)
|
|
}
|
|
return opts
|
|
}
|
|
|
|
// Option - how Options are passed as arguments
|
|
type Option func(*options)
|
|
|
|
// options = how options are represented
|
|
type options struct {
|
|
withName string
|
|
withPublicId string
|
|
withDescription string
|
|
withAddress string
|
|
withLimit int
|
|
withLiveness time.Duration
|
|
withUpdateTags bool
|
|
withWorkerTags []*Tag
|
|
withWorkerKeyIdentifier string
|
|
withWorkerKeys WorkerKeys
|
|
withControllerEncryptionPrivateKey []byte
|
|
withKeyId string
|
|
withNonce []byte
|
|
withNewIdFunc func(context.Context) (string, error)
|
|
withFetchNodeCredentialsRequest *types.FetchNodeCredentialsRequest
|
|
withTestPkiWorkerAuthorized bool
|
|
withTestPkiWorkerKeyId *string
|
|
withWorkerType WorkerType
|
|
withRoot string
|
|
}
|
|
|
|
func getDefaultOptions() options {
|
|
return options{
|
|
withNewIdFunc: newWorkerId,
|
|
}
|
|
}
|
|
|
|
// WithDescription provides an optional description.
|
|
func WithDescription(desc string) Option {
|
|
return func(o *options) {
|
|
o.withDescription = desc
|
|
}
|
|
}
|
|
|
|
// WithName provides an optional name.
|
|
func WithName(name string) Option {
|
|
return func(o *options) {
|
|
o.withName = name
|
|
}
|
|
}
|
|
|
|
// WithPublicId provides an optional public Id used for skipping one db call.
|
|
func WithPublicId(id string) Option {
|
|
return func(o *options) {
|
|
o.withPublicId = id
|
|
}
|
|
}
|
|
|
|
// WithAddress provides an optional address.
|
|
func WithAddress(address string) Option {
|
|
return func(o *options) {
|
|
o.withAddress = address
|
|
}
|
|
}
|
|
|
|
// WithLimit provides an option to provide a limit. Intentionally allowing
|
|
// negative integers. If WithLimit < 0, then unlimited results are returned.
|
|
// If WithLimit == 0, then default limits are used for results.
|
|
func WithLimit(limit int) Option {
|
|
return func(o *options) {
|
|
o.withLimit = limit
|
|
}
|
|
}
|
|
|
|
// WithLiveness indicates how far back we want to search for server entries.
|
|
// Use 0 for the default liveness (15 seconds). A liveness value of -1 removes
|
|
// the liveliness condition.
|
|
func WithLiveness(liveness time.Duration) Option {
|
|
return func(o *options) {
|
|
o.withLiveness = liveness
|
|
}
|
|
}
|
|
|
|
// WithUpdateTags indicates that we should perform tag updates in the DB.
|
|
// This would happen on first sync from a worker after startup or (eventually,
|
|
// perhaps), after a SIGHUP.
|
|
func WithUpdateTags(updateTags bool) Option {
|
|
return func(o *options) {
|
|
o.withUpdateTags = updateTags
|
|
}
|
|
}
|
|
|
|
// WithWorkerTags provides worker tags.
|
|
func WithWorkerTags(tags ...*Tag) Option {
|
|
return func(o *options) {
|
|
o.withWorkerTags = tags
|
|
}
|
|
}
|
|
|
|
func WithWorkerKeyIdentifier(workerKeyIdentifier string) Option {
|
|
return func(o *options) {
|
|
o.withWorkerKeyIdentifier = workerKeyIdentifier
|
|
}
|
|
}
|
|
|
|
func WithWorkerKeys(workerKeys WorkerKeys) Option {
|
|
return func(o *options) {
|
|
o.withWorkerKeys = workerKeys
|
|
}
|
|
}
|
|
|
|
func WithControllerEncryptionPrivateKey(controllerKey []byte) Option {
|
|
return func(o *options) {
|
|
o.withControllerEncryptionPrivateKey = controllerKey
|
|
}
|
|
}
|
|
|
|
func WithKeyId(keyId string) Option {
|
|
return func(o *options) {
|
|
o.withKeyId = keyId
|
|
}
|
|
}
|
|
|
|
func WithNonce(nonce []byte) Option {
|
|
return func(o *options) {
|
|
o.withNonce = nonce
|
|
}
|
|
}
|
|
|
|
// WithNewIdFunc allows an optional factory function for new worker IDs to be
|
|
// specified (this option is likely only useful for tests).
|
|
func WithNewIdFunc(fn func(context.Context) (string, error)) Option {
|
|
return func(o *options) {
|
|
o.withNewIdFunc = fn
|
|
}
|
|
}
|
|
|
|
// WithFetchNodeCredentialsRequest allows an optional
|
|
// FetchNodeCredentialsRequest to be specified.
|
|
func WithFetchNodeCredentialsRequest(req *types.FetchNodeCredentialsRequest) Option {
|
|
return func(o *options) {
|
|
o.withFetchNodeCredentialsRequest = req
|
|
}
|
|
}
|
|
|
|
// WithTestPkiWorkerAuthorizedKeyId should only be used in tests.
|
|
// It specifies that the test worker should be authorized when returned and
|
|
// assigns the key id for that worker to the string pointer in this option.
|
|
func WithTestPkiWorkerAuthorizedKeyId(id *string) Option {
|
|
return func(o *options) {
|
|
o.withTestPkiWorkerAuthorized = true
|
|
o.withTestPkiWorkerKeyId = id
|
|
}
|
|
}
|
|
|
|
// WithWorkerType allows specifying a particular type of worker (kms, pki)
|
|
// during lookup or listing
|
|
func WithWorkerType(with WorkerType) Option {
|
|
return func(o *options) {
|
|
o.withWorkerType = with
|
|
}
|
|
}
|
|
|
|
// WithRoot provides an optional root worker id.
|
|
func WithRoot(workerId string) Option {
|
|
return func(o *options) {
|
|
o.withRoot = workerId
|
|
}
|
|
}
|